WO2021179815A1

WO2021179815A1 - Encrypted communication method and apparatus, and electronic device and computer-readable storage medium

Info

Publication number: WO2021179815A1
Application number: PCT/CN2021/073732
Authority: WO
Inventors: 郭桦
Original assignee: Oppo广东移动通信有限公司
Priority date: 2020-03-09
Filing date: 2021-01-26
Publication date: 2021-09-16
Also published as: EP4117327A1; EP4117327A4; CN113453221B; US20220382886A1; CN113453221A

Abstract

An encrypted communication method, which is applied to a first electronic device that comprises a first processor and a second processor, wherein the first processor performs communication by means of an encrypted channel of first Bluetooth, and the second processor performs communication by means of an unencrypted channel of second Bluetooth. The method comprises: receiving, by means of a first processor, a key sent by a second electronic device, and sending the key to a second processor, wherein the key is sent to the first processor by the second electronic device by means of an encrypted channel of first Bluetooth; when the first electronic device is switched to a system where the second processor is located, receiving, by means of the second processor, a first ciphertext sent by the second electronic device, wherein the first ciphertext is sent to the second processor by the second electronic device by means of an unencrypted channel of second Bluetooth; and decrypting the first ciphertext by means of the second processor and by using the key, so as to obtain a first plaintext.

Description

Encrypted communication method, device, electronic equipment and computer readable storage medium

Cross-references to related applications

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office, the application number is 202010155715.X, and the invention title is "encrypted communication methods, devices, electronic equipment, and computer-readable storage media" on March 9, 2020. The entire content is incorporated into this application by reference.

Technical field

This application relates to the field of communication technology, and in particular to an encrypted communication method, device, electronic equipment, and computer-readable storage medium.

Background technique

With the development of communication technology, Bluetooth communication technology has emerged. Bluetooth is a radio technology that supports device short-distance communication (generally within 10m). It can exchange information wirelessly among many devices including mobile phones, PDAs (Personal Digital Assistant), wireless headsets, notebook computers, and related peripherals. .

However, the traditional method of using Bluetooth for communication has the problem of low security.

Summary of the invention

According to various embodiments of the present application, an encrypted communication method, device, electronic device, and computer-readable storage medium are provided.

An encrypted communication method, which is applied to a first electronic device including a first processor and a second processor, the first processor communicates through an encrypted channel of a first Bluetooth, and the second processor communicates through a second Bluetooth To communicate through an unencrypted channel; the method includes:

Receive the key sent by the second electronic device through the first processor, and send the key to the second processor; the key is the key sent by the second electronic device through the first Bluetooth The encryption channel is sent to the first processor, and the key is generated by the second electronic device;

When the first electronic device switches to the system where the second processor is located, the second processor receives the first ciphertext sent by the second electronic device; the first ciphertext is the The second electronic device sends to the second processor through the second Bluetooth non-encrypted channel, the first ciphertext is generated by the second electronic device using the key to encrypt the first plaintext ；

The second processor uses the key to decrypt the first ciphertext to obtain the first plaintext.

An encrypted communication device, which is applied to a first electronic device including a first processor and a second processor, the first processor communicates through an encrypted channel of a first Bluetooth, and the second processor communicates through a second Bluetooth Unencrypted channel for communication; including:

The key receiving module is configured to receive the key sent by the second electronic device through the first processor, and send the key to the second processor; the key is the second electronic device Sent to the first processor through the first Bluetooth encryption channel, and the key is generated by the second electronic device;

The first ciphertext receiving module is configured to receive the first ciphertext sent by the second electronic device through the second processor when the first electronic device is switched to the system where the second processor is located; The first ciphertext is sent by the second electronic device to the second processor through the second Bluetooth non-encrypted channel, and the first ciphertext is the second electronic device using the secret The key is generated by encrypting the first plaintext;

The decryption module is configured to decrypt the first ciphertext using the key by the second processor to obtain the first plaintext.

An electronic device includes a memory and a processor, and a computer program is stored in the memory. When the computer program is executed by the processor, the processor causes the processor to perform the operation of the encrypted communication method described above.

A computer-readable storage medium with a computer program stored thereon, and when the computer program is executed by a processor, the operation of the above-mentioned method is realized.

The aforementioned encrypted communication method, device, electronic device, and computer-readable storage medium are applied to a first electronic device including a first processor and a second processor. The first processor communicates through the first Bluetooth encryption channel, and the second The processor communicates through the non-encrypted channel of the second Bluetooth; receives the key sent by the second electronic device through the first processor, and sends the key to the second processor; the key is the second electronic device through the first Bluetooth When the encrypted channel of the first electronic device is sent to the first processor, the security of the key can be guaranteed; when the first electronic device is switched to the system where the second processor is located, that is, the first electronic device passes through the second processor and the second electronic device To communicate, and the second processor communicates through the non-encrypted channel of the second Bluetooth, receives the first ciphertext sent by the second electronic device through the second processor; uses the key to perform the first ciphertext through the second processor Decryption to obtain the first plaintext prevents data leakage when the second electronic device communicates with the second processor in plaintext, and improves the security of communication between the second electronic device and the first electronic device.

An encrypted communication method, applied to a second electronic device that communicates with a first electronic device, the first electronic device includes a first processor and a second processor, and the first processor is encrypted by a first Bluetooth Communication through a second Bluetooth channel, and the second processor communicates through a second Bluetooth non-encrypted channel; the method includes:

Generate key;

The key is sent to the first processor in the first electronic device through the first Bluetooth encryption channel; the key is used to instruct the first processor to receive the secret Sending the key to the second processor;

When it is detected that the first electronic device is switched to the system where the second processor is located, the first ciphertext is sent to the first ciphertext in the first electronic device through the non-encrypted channel of the second Bluetooth The second processor; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used to instruct the second processor to use the The key decrypts the first ciphertext to obtain the first plaintext.

An encrypted communication device applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor. The first processor is encrypted by a first Bluetooth Communication through a channel, and the second processor communicates through a second Bluetooth non-encrypted channel; the device includes:

Key generation module, used to generate keys;

A key sending module, configured to send the key to the first processor in the first electronic device through the first Bluetooth encryption channel; the key is used to instruct the first processing Sending the received key to the second processor;

The first ciphertext sending module is configured to send the first ciphertext to the system through the second Bluetooth unencrypted channel when it is detected that the first electronic device is switched to the system where the second processor is located. The second processor in the first electronic device; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used for Instruct the second processor to decrypt the first ciphertext by using the key to obtain the first plaintext.

The aforementioned encrypted communication method, device, electronic device, and computer-readable storage medium are applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor. The first processor Communicate through the encrypted channel of the first Bluetooth, the second processor communicates through the non-encrypted channel of the second Bluetooth; generate a key; send the key to the first processing in the first electronic device through the encrypted channel of the first Bluetooth The security of the key can be guaranteed; the key is used to instruct the first processor to send the received key to the second processor; when it is detected that the first electronic device is switched to the system where the second processor is located, that is The first electronic device communicates with the second electronic device through the second processor, and the second processor communicates through the second Bluetooth unencrypted channel, and sends the first ciphertext to the first through the second Bluetooth unencrypted channel. The second processor in the electronic device; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used to instruct the second processor to use the key to pair the first ciphertext The text is decrypted to obtain the first plain text, which avoids data leakage when the second electronic device communicates with the second processor in plain text, and improves the security of communication between the second electronic device and the first electronic device.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative work.

Fig. 1 is an application environment diagram of an encrypted communication method in an embodiment.

Fig. 2 is a flowchart of an encrypted communication method in an embodiment.

Figure 3a is a schematic diagram of the first electronic device communicating in a watch mode in an embodiment.

Figure 3b is a schematic diagram of the first electronic device communicating in a bracelet mode in an embodiment.

Fig. 4 is a flow chart of switching the first electronic device to the system where the second processor is located in an embodiment.

Fig. 5a is a schematic diagram of peripherals controlled by the first processor when the first electronic device is in the system where the first processor is located in an embodiment.

Fig. 5b is a schematic diagram of peripherals controlled by the second processor when the first electronic device is in the system where the second processor is located in an embodiment.

Fig. 6 is a flowchart of operating a second electronic device identifier for matching in an embodiment.

Fig. 7 is a flowchart of an encrypted communication method in another embodiment.

Fig. 8 is a flowchart of an encrypted communication method in another embodiment.

Fig. 9 is a structural block diagram of an encrypted communication device in an embodiment.

Fig. 10 is a structural block diagram of an encrypted communication device in another embodiment.

FIG. 11 is a schematic diagram of the internal structure of an electronic device in an embodiment.

Detailed ways

In order to make the purpose, technical solutions, and advantages of this application clearer and clearer, the following further describes the application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present application, and are not used to limit the present application.

It can be understood that the terms "first", "second", etc. used in this application can be used herein to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from another element. For example, without departing from the scope of the present application, the first electronic device may be referred to as the second electronic device, and similarly, the second electronic device may be referred to as the first electronic device. Both the first electronic device and the second electronic device are electronic devices, but they are not the same electronic device.

Fig. 1 is a schematic diagram of an application environment of an encrypted communication method in an embodiment. As shown in FIG. 1, the application environment includes a first electronic device 102, a second electronic device 104, and a server 106. The first electronic device 102 and the second electronic device 104 are connected and communicated via Bluetooth. Among them, the first electronic device 102 includes a first processor and a second processor. The first processor communicates with the second electronic device 104 through the first Bluetooth encrypted channel, and the second processor communicates with the second Bluetooth non-encrypted channel. Communicate with the second electronic device 104. The second electronic device 104 communicates with the server 106 through a network. Among them, the first electronic device 102 can be, but not limited to, smart bracelets and wearable devices, and the second electronic device 104 can be, but not limited to, various personal computers, notebook computers, smart phones, tablet computers, and portable wearable devices, and servers. 106 can be implemented with an independent server or a server cluster composed of multiple servers.

Fig. 2 is a flowchart of an encrypted communication method in an embodiment. The encrypted communication method in this embodiment is applied to a first electronic device including a first processor and a second processor. The first processor communicates through the encrypted channel of the first Bluetooth, and the second processor communicates through the second Bluetooth For communication in an unencrypted channel, the power consumption of the second Bluetooth is lower than the power consumption of the first Bluetooth. As shown in FIG. 2, the encrypted communication method includes operation 202 to operation 206.

In operation 202, the key sent by the second electronic device is received by the first processor, and the key is sent to the second processor; the key is sent by the second electronic device to the first processor through the encryption channel of the first Bluetooth. , The key is generated by the second electronic device.

The first electronic device includes a first processor and a second processor. Among them, the first processor may be used as a main processor, and the second processor may be used as a coprocessor; or the first processor may be used as a coprocessor, and the second processor may be used as a main processor.

The first electronic device includes a system where the first processor is located and a system where the second processor is located, that is, the first electronic device is a dual-system electronic device. For example, the system where the first processor is located is the Android system (Android system), and the system where the second processor is located is the RTOS system (Real-time operating system, real-time operating system).

When the first electronic device is in the system where the first processor is located, the first electronic device uses the first processor to communicate; when the first electronic device is in the system where the second processor is located, the first electronic device uses the second processing Device to communicate.

When the first electronic device is in the system where the first processor is located, the working mode of the first electronic device is the first mode; when the first electronic device is in the system where the second processor is located, the working mode of the first electronic device is The second mode. Among them, the first mode uses the first processor for communication, and the second mode uses the second processor for communication; the power consumption of the first mode is lower than that of the second mode.

For example, the first electronic device may be a smart bracelet, including dual systems, that is, including the system where the first processor is located and the system where the second processor is located, the system where the first processor is located may be an Android system, and the second processor The system is an RTOS system. When the smart bracelet is in the Android system, the first mode of the smart bracelet can be Watch Mode, and the Android system can provide more complete functions; when the smart bracelet is in the RTOS system, the second mode of the smart bracelet It can be in Twist Band Mode, and the RTOS system can provide low power consumption and long standby capability.

Bluetooth is a radio technology that supports device short-distance communication (generally within 10m). It can exchange information wirelessly among many devices including mobile phones, PDAs (Personal Digital Assistant), wireless headsets, notebook computers, and related peripherals. .

Bluetooth includes classic Bluetooth, low energy Bluetooth and so on. Classic Bluetooth includes BR (Basic Rate) Bluetooth, EDR (Enhanced Data Rate) Bluetooth, etc. Bluetooth Low Energy includes BLE (Bluetooth Low Energy) Bluetooth. Both the first Bluetooth and the second Bluetooth may be one of the above Bluetooth, and the power consumption of the second Bluetooth is lower than the power consumption of the first Bluetooth. For example, the first Bluetooth may be classic Bluetooth BR Bluetooth or EDR Bluetooth, and the second Bluetooth may be BLE Bluetooth.

The key sent by the second electronic device is received by the first processor, and the received key is sent to the second processor by the first processor. It is understandable that the first processor communicates through the encrypted channel of the first Bluetooth, the second processor communicates through the unencrypted channel of the second Bluetooth, and the first processor receives the second electronic channel through the encrypted channel of the first Bluetooth. The key sent by the device avoids the problem of key leakage caused by the second processor receiving the key sent by the second electronic device through the non-encrypted channel of the second Bluetooth, and the security of the key can be ensured.

In one embodiment, the first electronic device is a smart bracelet. When the first electronic device runs the system where the first processor is located, the first electronic device is in watch mode; when the first electronic device runs the system where the second processor is located, In the system, the first electronic device is in the bracelet mode.

As shown in FIG. 3a, the first electronic device 302 includes a first processor and a second processor, and the second electronic device 304 is installed with a target application program. When the first electronic device is in the watch mode, the first processor in the first electronic device 302 communicates with the target application in the second electronic device 304 through the encrypted channel of the first Bluetooth.

As shown in FIG. 3b, when the first electronic device is in the bracelet mode, the second processor in the first electronic device 302 communicates with the target application in the second electronic device 304 through the unencrypted channel of the first Bluetooth.

Operation 204, when the first electronic device is switched to the system where the second processor is located, receive the first ciphertext sent by the second electronic device through the second processor; The non-encrypted channel is sent to the second processor, and the first ciphertext is generated by the second electronic device using the key to encrypt the first plaintext.

When the first electronic device is in the system where the first processor is located, the first processor in the first electronic device communicates with the second electronic device through the encrypted channel of the first Bluetooth. When the first electronic device is switched to the system where the second processor is located, the second processor in the first electronic device communicates with the second electronic device through the non-encrypted channel of the second Bluetooth. It can be understood that the unencrypted channel of the second Bluetooth has low security. Therefore, when the first electronic device is switched to the system where the second processor is located, in order to ensure the security of the communication data, the second processor in the first electronic device and the second electronic device encrypt the communication data, and then pass the 2. The non-encrypted channel of Bluetooth is used for transmission.

In another embodiment, the key is generated by a target application in the second electronic device, and the target application is connected to the first electronic device. For example, the first electronic device is a smart bracelet, the second electronic device is a smart phone, and the target application is a health APP; the smart bracelet can obtain various data such as the user’s daily walking mileage, the user’s sleep duration, the user’s heartbeat frequency, etc. And send various data to the health APP in the smart phone; and the health APP can obtain various instructions of the user, such as the instruction to collect the user's heartbeat frequency, and send various instructions to the smart bracelet.

In one embodiment, as shown in Figure 4, the first electronic device is a smart bracelet. When the first electronic device is in the system where the first processor is located, the first electronic device is in watch mode; when the first electronic device is in When the system where the second processor is located, the first electronic device is in the bracelet mode. When the smart bracelet is switched from the watch mode to the bracelet mode, perform operation 402 to trigger the bracelet mode; perform operation 404 to display the switching animation; perform operation 406 to turn off the first Bluetooth; perform operation 408 to release screen control. The first processor of the first electronic device sends the switching instruction to the second processor. Among them, the switching instruction can be MSG: REQ_HOST_BAND_MODE. After the first processor releases the screen control right, the first processor is in the off state. When the second processor receives the switching instruction, it executes operation 410 to write the bracelet mode flag bit; executes operation 412 to activate the bracelet mode.

In operation 206, the second processor uses the key to decrypt the first ciphertext to obtain the first plaintext.

The first ciphertext sent by the second electronic device to the second processor is encrypted using a key. The key is the same as the key sent by the first processor received by the second processor. Therefore, the second processor can use the key to decrypt the first ciphertext to obtain the first plaintext.

In this embodiment, the above-mentioned encrypted communication method is applied to a first electronic device including a first processor and a second processor. The first processor communicates through the first Bluetooth encryption channel, and the second processor communicates through the second The non-encrypted channel of Bluetooth for communication, the power consumption of the second Bluetooth is lower than the power consumption of the first Bluetooth; the first processor receives the key sent by the second electronic device, and sends the key to the second processor; The key is sent by the second electronic device to the first processor through the first Bluetooth encryption channel, which can ensure the security of the key; when the first electronic device is switched to the system where the second processor is located, the first electronic device The second processor communicates with the second electronic device, and the second processor communicates through the second Bluetooth non-encrypted channel, and receives the first ciphertext sent by the second electronic device through the second processor; through the second processing The device uses the key to decrypt the first ciphertext to obtain the first plaintext, avoiding data leakage when the second electronic device communicates with the second processor in plaintext, and improving the security of the communication between the second electronic device and the first electronic device sex. And when communicating through the non-encrypted channel of the second Bluetooth, the power consumption of the communication can be reduced.

In one embodiment, the first electronic device is a smart bracelet, as shown in FIG. 5a, when the smart bracelet is in watch mode, that is, when the first electronic device is in the system where the first processor is located, the first processor may Control Screen (display screen), TP (touch screen), receive Key (key). As shown in Figure 5b, when the smart bracelet is switched to the bracelet mode, that is, when the first electronic device is in the system where the second processor is located, the second processor can control Screen (display screen), TP (touch screen), and receive Key. The second processor can also control PPG, ECG, A+G, ALS, CAP, Magnetometer and Barometer.

In an embodiment, as shown in FIG. 6, the above method further includes:

In operation 602, the identification of the second electronic device sent by the second electronic device is received by the first processor, and the identification of the second electronic device is sent to the second processor; the identification of the second electronic device is that the second electronic device passes the second electronic device A Bluetooth encrypted channel is sent.

The identification of the second electronic device may uniquely identify the second electronic device. The second electronic device can be uniquely found through the identification of the second electronic device. The identification of the second electronic device may be at least one of the MAC address of the second electronic device, the name of the second electronic device, a character string, and the like.

In operation 604, when the first electronic device is switched to the system where the second processor is located, the received identifier of the second electronic device is matched with each candidate device connected to the first electronic device through the second processor.

It is understandable that, if the second processor communicates through the non-encrypted channel of the second Bluetooth, all candidate devices within the communication range of the second processor can be connected to the second processor and communicate with the second processor. Therefore, the second processor matches the received identifier of the second electronic device with each connected candidate device, and searches for the second electronic device from each candidate device, so that the second processor and the second electronic device accurately communicate.

In operation 606, when there is an identifier of the second electronic device that matches the candidate device, the candidate device that matches the identifier of the second electronic device is the second electronic device, and executes the second processor to receive the second electronic device sent by the second electronic device. A ciphertext operation.

In this embodiment, the first processor receives the identification of the second electronic device sent by the second electronic device, and sends the identification of the second electronic device to the second processor; the identification of the second electronic device is the second electronic device. The device is sent through the encrypted channel of the first Bluetooth; when the first electronic device is switched to the system where the second processor is located, the second processor will receive the identification of the second electronic device with each candidate connected to the first electronic device The device is matched, and the user does not need to match the first electronic device with the second electronic device when the first electronic device switches the system, which can improve the efficiency of communication. And when the identification of the second electronic device matches the candidate device, the candidate device that matches the identification of the second electronic device is the second electronic device, and the second electronic device receives the first secret sent by the second electronic device through the second processor. With text operation, the second electronic device can be accurately found through the identification of the second electronic device, which prevents the theft or misconnection of peripheral devices of the first electronic device, and enables the second processor to accurately communicate with the second electronic device.

In one embodiment, the above method further includes: obtaining the second plaintext by the second processor; encrypting the second plaintext by using the key to generate the second ciphertext, and sending the second ciphertext to the second electronic device through the non-encrypted channel of the second Bluetooth Device; the second ciphertext is used to instruct the second electronic device to use the key to decrypt the second ciphertext to obtain the second plaintext.

When the second processor communicates with the second electronic device, the second processor uses the key to encrypt the second plaintext to obtain the second ciphertext, which is sent to the second electronic device through the second Bluetooth non-encrypted channel, Encrypt the second plaintext to avoid leakage of the second plaintext during transmission in the on-the-fly encrypted channel, which can improve security. After receiving the second ciphertext, the second electronic device can use the key to decrypt the second ciphertext to obtain the second plaintext. The second processor communicates with the second electronic device through the non-encrypted channel of the second Bluetooth, which can reduce power consumption.

In one embodiment, the above method further includes: when detecting the first connection with the first electronic device, judging the currently running system; when the currently running system is the system where the first processor is located, executing through the first processor Receive the key operation sent by the second electronic device; when the currently running system is the system where the second processor is located, switch the first electronic device to the system where the first processor is located, and execute receiving the second The key operation sent by the electronic device.

The first connection between the first electronic device and the second electronic device refers to the first connection between the first electronic device and the second electronic device, or the first electronic device has been connected with the second electronic device before, but the first electronic device clears the cache Then connect with the second electronic device.

When detecting the first connection with the first electronic device, the first electronic device determines the currently running system. The system currently running on the first electronic device may be one of the system where the first processor is located and the system where the second processor is located.

When the currently running system is the system where the first processor is located, the operation of receiving the key sent by the second electronic device through the first processor is executed. When the currently running system is the system where the second processor is located, the first electronic device first switches the currently running system to the system where the first processor is located, and uses the first Bluetooth encryption channel to communicate with the second electronic device , That is, receiving the key sent by the second electronic device through the encryption channel of the first Bluetooth, which can ensure the security of the key.

Fig. 7 is a flowchart of an encrypted communication method in another embodiment. The encrypted communication method in this embodiment is applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor, and the first processor passes through the encrypted channel of the first Bluetooth For communication, the second processor communicates through the non-encrypted channel of the second Bluetooth, and the power consumption of the second Bluetooth is lower than the power consumption of the first Bluetooth. As shown in FIG. 7, the encrypted communication method includes operations 702 to 706.

In operation 702, a key is generated.

Further, the key can be generated by the target application in the second electronic device. For example, the target application is a health APP connected to the first electronic device.

In operation 704, the key is sent to the first processor in the first electronic device through the encryption channel of the first Bluetooth; the key is used to instruct the first processor to send the received key to the second processor.

In operation 706, when it is detected that the first electronic device is switched to the system where the second processor is located, the first ciphertext is sent to the second processor in the first electronic device through the non-encrypted channel of the second Bluetooth; The text is obtained by encrypting the first plain text obtained by the second electronic device using the key, and the first cipher text is used to instruct the second processor to use the key to decrypt the first cipher text to obtain the first plain text.

The above-mentioned encrypted communication method is applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor. The first processor communicates through a first Bluetooth encryption channel. The second processor communicates through the non-encrypted channel of the second Bluetooth; the power consumption of the second Bluetooth is lower than that of the first Bluetooth; generates a key; sends the key to the first electronic device through the encrypted channel of the first Bluetooth The first processor can ensure the security of the key; the key is used to instruct the first processor to send the received key to the second processor; when it is detected that the first electronic device is switched to the second processor In the system, the first electronic device communicates with the second electronic device through the second processor, and the second processor communicates through the second Bluetooth non-encrypted channel, passing the first ciphertext through the second Bluetooth non-encrypted channel Sent to the second processor in the first electronic device; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used to instruct the second processor to use the key Decrypting the first ciphertext to obtain the first plaintext avoids data leakage when the second electronic device communicates with the second processor in plaintext, and improves the security of communication between the second electronic device and the first electronic device. And when communicating through the non-encrypted channel of the second Bluetooth, the power consumption of the communication can be reduced.

In one embodiment, the above method further includes: sending the identification of the second electronic device to the first processor in the first electronic device through the encrypted channel of the first Bluetooth; the identification of the second electronic device is used to indicate the first processing The device sends the received identification of the second electronic device to the second processor, and the received identification of the second electronic device is matched with each candidate device connected to the first electronic device through the second processor. When there is a second electronic device When the identifier of matches the candidate device, the candidate device that matches the identifier of the second electronic device is the second electronic device, and the first ciphertext sent by the second electronic device is received through the second processor.

In this embodiment, the identifier of the second electronic device is sent to the first processor in the first electronic device through the encrypted channel of the first Bluetooth; the identifier of the second electronic device is used to instruct the first processor to receive the first processor The identification of the second electronic device is sent to the second processor, and the received identification of the second electronic device is matched with each candidate device connected to the first electronic device through the second processor, and the user does not need to switch the system of the first electronic device. Matching the first electronic device and the second electronic device can improve the efficiency of communication. And when there is an identification of the second electronic device that matches the candidate device, the candidate device that matches the identification of the second electronic device is the second electronic device, and the second electronic device can be accurately found through the identification of the second electronic device, The second processor can accurately communicate with the second electronic device, that is, the first ciphertext sent by the second electronic device is received by the second processor.

In one embodiment, the above method further includes: sending the key to the server; when the second electronic device clears the key, obtaining the identification of the connected first electronic device, and sending the identification of the first electronic device to the server The identification of the first electronic device is used to instruct the server to obtain a key matching the identification of the first electronic device; to receive a key matching the identification of the first electronic device sent by the server.

The deletion of the key by the second electronic device may be that the second electronic device deletes the key, or the electronic device clears the cache, thereby clearing the key, but it is not limited to this.

Further, the identification of the first electronic device is sent to the server, and the identification of the first electronic device may also be used to instruct the server to obtain device information that matches the identification of the first electronic device, such as the MAC address of the first electronic device, and the first electronic device. The user name of an electronic device, the brand of the first electronic device, etc.

In this embodiment, the key is sent to the server; when the second electronic device clears the key, the identification of the connected first electronic device is obtained, and the identification of the first electronic device is sent to the server; it can be obtained from the server A key that matches the identification of the first electronic device. Even after the second electronic device clears the key, it can obtain the key from the server again and communicate with the first electronic device through the key.

In one embodiment, as shown in FIG. 8, 802 is a first electronic device, and the first electronic device includes a first processor and a second processor. When the first electronic device 802 is connected to the second electronic device for the first time, the second electronic device executes operation 804 to generate a key; the second electronic device executes operation 806 to pass the identification and key of the second electronic device through the first Bluetooth The encrypted channel is sent to the first processor in the first electronic device 802. When the first processor receives the second electronic device identification and key sent by the second electronic device, operation 808 is performed, and the first processor sends the second electronic device identification and key to the second processor. When the second processor receives the second electronic device identification and key sent by the first processor, operation 810 is performed, and the second processor stores the second electronic device identification and key. The second electronic device performs operation 812 and sends the key to the server.

When the first electronic device is switched to the system where the second processor is located, the second processor performs operation 814 to match the identification of the second electronic device with each of the candidate devices connected, and when there is the identification of the second electronic device and the candidate When the devices are matched, the candidate device that matches the identifier of the second electronic device is the second electronic device. The second electronic device performs operation 816 to encrypt the first plaintext using the key to obtain the first ciphertext. The second electronic device performs operation 818 to send the first ciphertext to the second processor through the non-encrypted channel of the second Bluetooth. When the second processor receives the first ciphertext, it performs operation 820 to decrypt the first ciphertext using the key to obtain the first plaintext. The second processor performs operation 822 to encrypt the second plaintext using the key to obtain the second ciphertext. The second processor performs operation 824 to send the second ciphertext to the second electronic device through the non-encrypted channel of the second Bluetooth. When the second electronic device receives the second ciphertext, it performs operation 826 to decrypt the second ciphertext using the key to obtain the second plaintext.

After the second electronic device clears the key, the second electronic device may obtain the identification of the connected first electronic device, and perform operation 828 to send the identification of the first electronic device to the server. When receiving the identification of the first electronic device, the server obtains a key matching the identification of the first electronic device, and performs operation 830 to send the key to the second electronic device.

It should be understood that although the various operations in the flowcharts of FIG. 2, FIG. 6 and FIG. 7 are displayed in sequence as indicated by the arrows, these operations are not necessarily performed in sequence in the order indicated by the arrows. Unless explicitly stated in this article, there is no strict order for the execution of these operations, and these operations can be executed in other orders. Moreover, at least part of the operations in Figure 2, Figure 6 and Figure 7 may include multiple sub-operations or multiple stages. These sub-operations or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of the sub-operations or stages is not necessarily performed sequentially, but may be executed alternately or alternately with other operations or at least a part of the sub-operations or stages of other operations.

Fig. 9 is a structural block diagram of an encrypted communication device according to an embodiment. As shown in FIG. 9, an encrypted communication device 900 is provided, which is applied to a first electronic device including a first processor and a second processor. The first processor communicates through a first Bluetooth encryption channel, and the second process The device communicates through the non-encrypted channel of the second Bluetooth, and the power consumption of the second Bluetooth is lower than that of the first Bluetooth; the device includes: a key receiving module 902, a first ciphertext receiving module 904, and a decryption module 906. :

The key receiving module 902 is configured to receive the key sent by the second electronic device through the first processor and send the key to the second processor; the key is sent to the second electronic device through the encryption channel of the first Bluetooth For the first processor, the key is generated by the second electronic device.

The first ciphertext receiving module 904 is configured to receive the first ciphertext sent by the second electronic device through the second processor when the first electronic device is switched to the system where the second processor is located; the first ciphertext is the second The electronic device sends to the second processor through the non-encrypted channel of the second Bluetooth, and the first ciphertext is generated by the second electronic device using the key to encrypt the first plaintext.

The decryption module 906 is configured to decrypt the first ciphertext by using the key by the second processor to obtain the first plaintext.

The above encrypted communication device is applied to a first electronic device including a first processor and a second processor. The first processor communicates through the encrypted channel of the first Bluetooth, and the second processor communicates through the non-encrypted channel of the second Bluetooth. Communication, the power consumption of the second Bluetooth is lower than the power consumption of the first Bluetooth; the first processor receives the key sent by the second electronic device, and sends the key to the second processor; the key is the second electronic device The encryption key is sent to the first processor through the first Bluetooth encryption channel, which can ensure the security of the key; when the first electronic device is switched to the system where the second processor is located, that is, the first electronic device communicates with the second processor through the second processor. The second electronic device communicates, and the second processor communicates through the non-encrypted channel of the second Bluetooth, and receives the first ciphertext sent by the second electronic device through the second processor; A ciphertext is decrypted to obtain the first plaintext, which avoids data leakage when the second electronic device communicates with the second processor in plaintext, and improves the security of communication between the second electronic device and the first electronic device. And when communicating through the non-encrypted channel of the second Bluetooth, the power consumption of the communication can be reduced.

In one embodiment, the aforementioned encrypted communication device 900 further includes a matching module, configured to receive the identification of the second electronic device sent by the second electronic device through the first processor, and send the identification of the second electronic device to the second processor. The identification of the second electronic device is sent by the second electronic device through the encrypted channel of the first Bluetooth; when the first electronic device is switched to the system where the second processor is located, the second electronic device received by the second processor The device identification is matched with each candidate device connected to the first electronic device; when there is a second electronic device that matches the candidate device, the candidate device that matches the identification of the second electronic device is the second electronic device, execute The first ciphertext operation sent by the second electronic device is received by the second processor.

In an embodiment, the above-mentioned encrypted communication device 900 further includes an encryption module for obtaining the second plaintext through the second processor; encrypting the second plaintext with a key to generate the second ciphertext, and using the second Bluetooth The encrypted channel is sent to the second electronic device; the second ciphertext is used to instruct the second electronic device to use the key to decrypt the second ciphertext to obtain the second plaintext.

In one embodiment, the above-mentioned encrypted communication device 900 further includes a current running system judgment module, which is used to judge the currently running system when the first connection with the second electronic device is detected; when the current running system is where the first processor is located When the system of the first processor is used, the operation of receiving the key sent by the second electronic device through the first processor is executed; when the currently running system is the system where the second processor is located, the first electronic device is switched to the system where the first processor is located Execute the operation of receiving the key sent by the second electronic device through the first processor.

Fig. 10 is a structural block diagram of an encrypted communication device according to an embodiment. As shown in FIG. 10, an encrypted communication device 1000 is provided, which is applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor. The encrypted channel of the first Bluetooth communicates, and the second processor communicates through the non-encrypted channel of the second Bluetooth. The power consumption of the second Bluetooth is lower than that of the first Bluetooth; the device includes: a key generation module 1002, a secret The key sending module 1004 and the first ciphertext sending module 1006, where:

The key generation module 1002 is used to generate keys.

The key sending module 1004 is used to send the key to the first processor in the first electronic device through the first Bluetooth encryption channel; the key is used to instruct the first processor to send the received key to the second processor Device.

The first ciphertext sending module 1006 is configured to send the first ciphertext to the first ciphertext in the first electronic device through the second Bluetooth non-encrypted channel when it is detected that the first electronic device is switched to the system where the second processor is located. Two processors; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used to instruct the second processor to use the key to decrypt the first ciphertext to obtain The first plaintext.

The aforementioned encrypted communication device is applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor. The first processor communicates through a first Bluetooth encryption channel. The second processor communicates through the non-encrypted channel of the second Bluetooth; the power consumption of the second Bluetooth is lower than that of the first Bluetooth; generates a key; sends the key to the first electronic device through the encrypted channel of the first Bluetooth The first processor can ensure the security of the key; the key is used to instruct the first processor to send the received key to the second processor; when it is detected that the first electronic device is switched to the second processor In the system, the first electronic device communicates with the second electronic device through the second processor, and the second processor communicates through the second Bluetooth non-encrypted channel, passing the first ciphertext through the second Bluetooth non-encrypted channel Sent to the second processor in the first electronic device; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used to instruct the second processor to use the key Decrypting the first ciphertext to obtain the first plaintext avoids data leakage when the second electronic device communicates with the second processor in plaintext, and improves the security of communication between the second electronic device and the first electronic device. And when communicating through the non-encrypted channel of the second Bluetooth, the power consumption of the communication can be reduced.

In an embodiment, the aforementioned encrypted communication device 1000 further includes an identification sending module of the second electronic device, configured to send the identification of the second electronic device to the first processor in the first electronic device through the encryption channel of the first Bluetooth. The identification of the second electronic device is used to instruct the first processor to send the received identification of the second electronic device to the second processor, and the received identification of the second electronic device is connected to the first electronic device through the second processor When there is a second electronic device that matches the candidate device, the candidate device that matches the identification of the second electronic device is the second electronic device, and the second electronic device is received by the second processor The first ciphertext sent.

In one embodiment, the above-mentioned encrypted communication device 1000 further includes a key acquisition module for sending the key to the server; when the second electronic device clears the key, the identification of the connected first electronic device is acquired, and the The identification of the first electronic device is sent to the server; the identification of the first electronic device is used to instruct the server to obtain a key that matches the identification of the first electronic device; and the key that matches the identification of the first electronic device sent by the server is received .

The division of the modules in the above-mentioned encrypted communication device is only for illustration. In other embodiments, the encrypted communication device can be divided into different modules as required to complete all or part of the functions of the above-mentioned encrypted communication device.

For the specific definition of the encrypted communication device, please refer to the above definition of the encrypted communication method, which will not be repeated here. Each module in the aforementioned encrypted communication device can be implemented in whole or in part by software, hardware, and a combination thereof. The above-mentioned modules may be embedded in the form of hardware or independent of the processor in the computer equipment, or may be stored in the memory of the computer equipment in the form of software, so that the processor can call and execute the operations corresponding to the above-mentioned modules.

FIG. 11 is a schematic diagram of the internal structure of an electronic device in an embodiment. As shown in FIG. 11, the electronic device includes a processor and a memory connected through a system bus. Among them, the processor is used to provide computing and control capabilities to support the operation of the entire electronic device. The memory may include a non-volatile storage medium and internal memory. The non-volatile storage medium stores an operating system and a computer program. The computer program can be executed by the processor to implement an encrypted communication method provided in the following embodiments. The internal memory provides a cached operating environment for the operating system computer program in the non-volatile storage medium. The electronic device can be any terminal device such as a mobile phone, a tablet computer, a PDA (Personal Digital Assistant), a POS (Point of Sales), a vehicle-mounted computer, and a wearable device.

The implementation of each module in the encrypted communication device provided in the embodiment of the present application may be in the form of a computer program. The computer program can be run on a terminal or a server. The program module constituted by the computer program can be stored in the memory of the electronic device. When the computer program is executed by the processor, the operation of the method described in the embodiment of the present application is realized.

The embodiment of the present application also provides a computer-readable storage medium. One or more non-volatile computer-readable storage media containing computer-executable instructions, when the computer-executable instructions are executed by one or more processors, cause the processors to perform operations of the encrypted communication method.

A computer program product containing instructions that, when run on a computer, causes the computer to execute an encrypted communication method.

Any reference to memory, storage, database, or other media used in this application may include non-volatile and/or volatile memory. Non-volatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM), which acts as external cache memory. As an illustration and not a limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous Link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

The above-mentioned embodiments only express several implementation manners of the present application, and their description is relatively specific and detailed, but they should not be understood as a limitation to the patent scope of the present application. It should be noted that for those of ordinary skill in the art, without departing from the concept of this application, several modifications and improvements can be made, and these all fall within the protection scope of this application. Therefore, the scope of protection of the patent of this application shall be subject to the appended claims.

Claims

An encrypted communication method, characterized in that it is applied to a first electronic device including a first processor and a second processor, the first processor communicates through a first Bluetooth encryption channel, and the second processor Communicate through the non-encrypted channel of the second Bluetooth; the method includes:

Receive the key sent by the second electronic device through the first processor, and send the key to the second processor; the key is the key sent by the second electronic device through the first Bluetooth The encryption channel is sent to the first processor, and the key is generated by the second electronic device;

When the first electronic device switches to the system where the second processor is located, the second processor receives the first ciphertext sent by the second electronic device; the first ciphertext is the The second electronic device sends to the second processor through the second Bluetooth non-encrypted channel, the first ciphertext is generated by the second electronic device using the key to encrypt the first plaintext ;and

The second processor uses the key to decrypt the first ciphertext to obtain the first plaintext.
The method according to claim 1, wherein the method further comprises:

Receive the identification of the second electronic device sent by the second electronic device through the first processor, and send the identification of the second electronic device to the second processor; the identification of the second electronic device Is sent by the second electronic device through the encrypted channel of the first Bluetooth;

When the first electronic device is switched to the system where the second processor is located, the received identifier of the second electronic device is combined with each candidate device connected to the first electronic device through the second processor Make a match; and

When there is an identifier of the second electronic device that matches the candidate device, the candidate device that matches the identifier of the second electronic device is the second electronic device, and the second process is executed. The first ciphertext operation sent by the second electronic device.
The method according to claim 1, wherein the method further comprises:

Obtain a second plaintext through the second processor; and

Use the key to encrypt the second plaintext to generate a second ciphertext, and send it to the second electronic device through the second Bluetooth non-encrypted channel; the second ciphertext is used to indicate the The second electronic device uses the key to decrypt the second ciphertext to obtain the second plaintext.
The method according to claim 1, wherein the method further comprises:

When it is detected that it is connected to the second electronic device for the first time, determine the currently running system;

When the currently running system is the system where the first processor is located, performing the operation of receiving the key sent by the second electronic device through the first processor; and

When the currently running system is the system where the second processor is located, switch the first electronic device to the system where the first processor is located, and execute the receiving of the first electronic device through the first processor. 2. The key operation sent by the electronic device.
The method according to claim 1, wherein the method further comprises:

When the first electronic device is in the system where the first processor is located, the first processor is used for communication; and

When the first electronic device is in the system where the second processor is located, the second processor is used for communication.
An encrypted communication method, characterized in that it is applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor. A Bluetooth encrypted channel communicates, and the second processor communicates through a second Bluetooth non-encrypted channel; the method includes:

Generate key;

The key is sent to the first processor in the first electronic device through the first Bluetooth encryption channel; the key is used to instruct the first processor to receive the secret The key is sent to the second processor; and

When it is detected that the first electronic device is switched to the system where the second processor is located, the first ciphertext is sent to the first ciphertext in the first electronic device through the non-encrypted channel of the second Bluetooth The second processor; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used to instruct the second processor to use the The key decrypts the first ciphertext to obtain the first plaintext.
The method according to claim 6, wherein the method further comprises:

Sending the identifier of the second electronic device to the first processor in the first electronic device through the first Bluetooth encryption channel;

The identifier of the second electronic device is used to instruct the first processor to send the received identifier of the second electronic device to the second processor, and the received first processor is sent to the second processor through the second processor. Second, the identification of the electronic device is matched with each candidate device connected to the first electronic device, and when there is an identification of the second electronic device that matches the candidate device, it matches the identification of the second electronic device The candidate device of is the second electronic device, and the first ciphertext sent by the second electronic device is received by the second processor.
The method according to claim 6, wherein the method further comprises:

Sending the key to the server;

When the second electronic device clears the key, obtains the identification of the connected first electronic device, and sends the identification of the first electronic device to the server; The identifier is used to instruct the server to obtain the key that matches the identifier of the first electronic device; and

Receiving the key that matches the identifier of the first electronic device sent by the server.
The method according to claim 6, wherein said generating a key comprises:

The key is generated by the target application program connected to the first electronic device.
An encrypted communication device, characterized in that it is applied to a first electronic device including a first processor and a second processor, the first processor communicates through a first Bluetooth encryption channel, and the second processor Communicate through the non-encrypted channel of the second Bluetooth; including:

The key receiving module is configured to receive the key sent by the second electronic device through the first processor, and send the key to the second processor; the key is the second electronic device Sent to the first processor through the first Bluetooth encryption channel, and the key is generated by the second electronic device;

The first ciphertext receiving module is configured to receive the first ciphertext sent by the second electronic device through the second processor when the first electronic device is switched to the system where the second processor is located; The first ciphertext is sent by the second electronic device to the second processor through the second Bluetooth non-encrypted channel, and the first ciphertext is the second electronic device using the secret The key is generated by encrypting the first plaintext; and

The decryption module is configured to decrypt the first ciphertext using the key by the second processor to obtain the first plaintext.
The device according to claim 10, wherein the device further comprises a matching module, configured to receive the identifier of the second electronic device sent by the second electronic device through the first processor, and to compare the The identification of the second electronic device is sent to the second processor; the identification of the second electronic device is sent by the second electronic device through the encryption channel of the first Bluetooth;

When the first electronic device is switched to the system where the second processor is located, the received identifier of the second electronic device is combined with each candidate device connected to the first electronic device through the second processor Make a match; and

When there is an identifier of the second electronic device that matches the candidate device, the candidate device that matches the identifier of the second electronic device is the second electronic device, and the second process is executed. The first ciphertext operation sent by the second electronic device.
The device according to claim 10, wherein the device further comprises an encryption module, configured to obtain the second plaintext through the second processor; and

Use the key to encrypt the second plaintext to generate a second ciphertext, and send it to the second electronic device through the second Bluetooth non-encrypted channel; the second ciphertext is used to indicate the The second electronic device uses the key to decrypt the second ciphertext to obtain the second plaintext.
The device according to claim 10, wherein the device further comprises a current running system judging module for judging the currently running system when the first connection with the second electronic device is detected;

When the currently running system is the system where the first processor is located, performing the operation of receiving the key sent by the second electronic device through the first processor; and

When the currently running system is the system where the second processor is located, switch the first electronic device to the system where the first processor is located, and execute the receiving of the first electronic device through the first processor. 2. The key operation sent by the electronic device.
An encrypted communication device, characterized in that it is applied to a second electronic device that communicates with a first electronic device. The first electronic device includes a first processor and a second processor. The first processor passes through the A Bluetooth encrypted channel communicates, and the second processor communicates through a second Bluetooth non-encrypted channel; the device includes:

Key generation module, used to generate keys;

A key sending module, configured to send the key to the first processor in the first electronic device through the first Bluetooth encryption channel; the key is used to instruct the first processing The device sends the received key to the second processor; and

The first ciphertext sending module is configured to send the first ciphertext to the system through the second Bluetooth unencrypted channel when it is detected that the first electronic device is switched to the system where the second processor is located. The second processor in the first electronic device; the first ciphertext is obtained by encrypting the first plaintext obtained by the second electronic device using the key, and the first ciphertext is used for Instruct the second processor to decrypt the first ciphertext by using the key to obtain the first plaintext.
The device according to claim 14, wherein the device further comprises:

An identification sending module of the second electronic device, configured to send the identification of the second electronic device to the first processor in the first electronic device through the first Bluetooth encryption channel;

The identifier of the second electronic device is used to instruct the first processor to send the received identifier of the second electronic device to the second processor, and the received first processor is sent to the second processor through the second processor. Second, the identification of the electronic device is matched with each candidate device connected to the first electronic device, and when there is an identification of the second electronic device that matches the candidate device, it matches the identification of the second electronic device The candidate device of is the second electronic device, and the first ciphertext sent by the second electronic device is received by the second processor.
The device according to claim 14, wherein the device further comprises:

The key acquisition module is configured to send the key to the server; when the second electronic device clears the key, acquire the identifier of the connected first electronic device, and send the first electronic device The identification of the device is sent to the server; the identification of the first electronic device is used to instruct the server to obtain the key that matches the identification of the first electronic device; The key that matches the identifier of the first electronic device.
The apparatus according to claim 14, wherein the key generation module is further configured to generate a key through a target application connected to the first electronic device.
An electronic device comprising a memory and a processor, and a computer program is stored in the memory. When the computer program is executed by the processor, the processor executes any one of claims 1 to 9 The operation of the encrypted communication method.
A computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the operation of the method according to any one of claims 1 to 9 when the computer program is executed by a processor.